<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Is there a flat file where Splunk user names and assigned roles stored? in Security</title>
    <link>https://community.splunk.com/t5/Security/Is-there-a-flat-file-where-Splunk-user-names-and-assigned-roles/m-p/175823#M5223</link>
    <description>&lt;P&gt;When i try to run a CLI command to add a dummy user account i get an error about non existent role. I can see the role exists in the admin web page under the "roles" column....&lt;/P&gt;

&lt;P&gt;Ran command like this...&lt;/P&gt;

&lt;P&gt;d:_programfiles_splunk_bin&amp;gt; .\splunk.exe add user michael -password changeme -role app-test -auth admin:[our password]&lt;/P&gt;

&lt;P&gt;"In handler 'users' : Error creating user. role="app-test" does not exist"&lt;/P&gt;

&lt;P&gt;Why would this be happening? Thanks for assistance&lt;/P&gt;</description>
    <pubDate>Mon, 28 Sep 2020 19:14:13 GMT</pubDate>
    <dc:creator>jrdba</dc:creator>
    <dc:date>2020-09-28T19:14:13Z</dc:date>
    <item>
      <title>Is there a flat file where Splunk user names and assigned roles stored?</title>
      <link>https://community.splunk.com/t5/Security/Is-there-a-flat-file-where-Splunk-user-names-and-assigned-roles/m-p/175820#M5220</link>
      <description>&lt;P&gt;Hi folks, I was wondering if there was a flat file that exists where user account names &amp;amp; their assigned roles are stored? I'm &lt;STRONG&gt;not&lt;/STRONG&gt; trying to get passwords, just user names and assigned roles which we manually create. I'm trying to automate this process via powershell. Manual process is taking too long. Thank you much &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;/P&gt;

&lt;P&gt;Access control | Users | New button&lt;/P&gt;</description>
      <pubDate>Thu, 12 Mar 2015 15:05:43 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Is-there-a-flat-file-where-Splunk-user-names-and-assigned-roles/m-p/175820#M5220</guid>
      <dc:creator>jrdba</dc:creator>
      <dc:date>2015-03-12T15:05:43Z</dc:date>
    </item>
    <item>
      <title>Re: Is there a flat file where Splunk user names and assigned roles stored?</title>
      <link>https://community.splunk.com/t5/Security/Is-there-a-flat-file-where-Splunk-user-names-and-assigned-roles/m-p/175821#M5221</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;

&lt;P&gt;Below Search will help you to get the list of users, and you can write it in to csv / flat file. &lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;|rest /services/authentication/users splunk_server=local |fields title roles realname email|rename title as userName|rename realname as Name | table Name, userName, email, roles | stats values(*) as * by userName delim=", " | nomv roles
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;You can use the command line / REST to create user. Either way you can do the same thing in your script,&lt;/P&gt;

&lt;P&gt;Read this &lt;A href="http://docs.splunk.com/Documentation/Splunk/6.2.2/Security/ConfigureuserswiththeCLI"&gt;Doc&lt;/A&gt;&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt; 1. Write a script to search list of users and their roles (the above search query) and output your results to CSV/flat file. So you can access the csv/flat file from your script.
 2. using REST / Command line user insert you can create n number of users.
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Cheers!&lt;/P&gt;</description>
      <pubDate>Thu, 12 Mar 2015 15:55:51 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Is-there-a-flat-file-where-Splunk-user-names-and-assigned-roles/m-p/175821#M5221</guid>
      <dc:creator>vasanthmss</dc:creator>
      <dc:date>2015-03-12T15:55:51Z</dc:date>
    </item>
    <item>
      <title>Re: Is there a flat file where Splunk user names and assigned roles stored?</title>
      <link>https://community.splunk.com/t5/Security/Is-there-a-flat-file-where-Splunk-user-names-and-assigned-roles/m-p/175822#M5222</link>
      <description>&lt;P&gt;I just realized basically run this search on the GUI. Thanks&lt;/P&gt;</description>
      <pubDate>Thu, 12 Mar 2015 16:45:12 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Is-there-a-flat-file-where-Splunk-user-names-and-assigned-roles/m-p/175822#M5222</guid>
      <dc:creator>jrdba</dc:creator>
      <dc:date>2015-03-12T16:45:12Z</dc:date>
    </item>
    <item>
      <title>Re: Is there a flat file where Splunk user names and assigned roles stored?</title>
      <link>https://community.splunk.com/t5/Security/Is-there-a-flat-file-where-Splunk-user-names-and-assigned-roles/m-p/175823#M5223</link>
      <description>&lt;P&gt;When i try to run a CLI command to add a dummy user account i get an error about non existent role. I can see the role exists in the admin web page under the "roles" column....&lt;/P&gt;

&lt;P&gt;Ran command like this...&lt;/P&gt;

&lt;P&gt;d:_programfiles_splunk_bin&amp;gt; .\splunk.exe add user michael -password changeme -role app-test -auth admin:[our password]&lt;/P&gt;

&lt;P&gt;"In handler 'users' : Error creating user. role="app-test" does not exist"&lt;/P&gt;

&lt;P&gt;Why would this be happening? Thanks for assistance&lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 19:14:13 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Is-there-a-flat-file-where-Splunk-user-names-and-assigned-roles/m-p/175823#M5223</guid>
      <dc:creator>jrdba</dc:creator>
      <dc:date>2020-09-28T19:14:13Z</dc:date>
    </item>
  </channel>
</rss>

